@redacto.io/consent-sdk-react 10.0.0-beta.8 → 10.0.0

package/dist/privacy-center.d.mts

@@ -382,6 +382,7 @@ type NominatorInfo = {
 };
 type PurposeItem = {
     purpose_uuid: string;
+    uuid?: string;
     name: string;
     description: string | null;
     status: ConsentStatusEnum | string;
@@ -390,7 +391,6 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
-    revocable?: boolean;
     revoke_warning_message?: string | null;
     notice_uuid: string | null;
 };
@@ -661,13 +661,36 @@ interface RedactoPrivacyCenterProps {
     baseUrl: string;
     ledgerBaseUrl?: string;
     slug: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: a pasted static token. When set, the Privacy Center runs
+     * against the sandbox with no JWT — it sends the single `X-Consent-Token`
+     * header, carries the acting identity (`email` || `mobile`) in each request's
+     * own payload, takes org/workspace from `organisationUuid`/`workspaceUuid`,
+     * and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox test subject email (carried in the request payload when set). */
+    email?: string;
+    /** Sandbox test subject mobile (fallback subject when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org in sandbox mode). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace in sandbox mode). */
+    workspaceUuid?: string;
     onError: (error: Error) => boolean;
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -688,6 +711,29 @@ declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
 declare const NotificationsPage: () => react.JSX.Element;
 
+type AuthProviderProps = Readonly<{
+    children: ReactNode;
+    accessToken?: string;
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: when set, the Privacy Center skips the JWT entirely — it seeds
+     * org/workspace/subject from the props below, sends the single
+     * `X-Consent-Token` header, carries the acting identity in each request's own
+     * payload, and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    /** Sandbox subject (email or mobile) — carried in the request payload. */
+    sandboxSubject?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
+    workspaceUuid?: string;
+    /** Organisation slug — used to seed sandbox sessionStorage. */
+    slug?: string;
+    onError: (error: Error) => boolean;
+}>;
 type AuthContextValue = Readonly<{
     accessToken: string;
     refreshToken: string;
@@ -878,13 +924,7 @@ declare const fetchCaseHistory: (organizationId: string, workspaceId: string, co
 
 declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
-interface AuthProviderProps {
-    children: ReactNode;
-    accessToken: string;
-    refreshToken: string;
-    onError: (error: Error) => boolean;
-}
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
+declare const AuthProvider: (props: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**

package/dist/privacy-center.d.ts

@@ -382,6 +382,7 @@ type NominatorInfo = {
 };
 type PurposeItem = {
     purpose_uuid: string;
+    uuid?: string;
     name: string;
     description: string | null;
     status: ConsentStatusEnum | string;
@@ -390,7 +391,6 @@ type PurposeItem = {
     method: string;
     data_elements: ConsentDataElement[];
     link_reason: string | null;
-    revocable?: boolean;
     revoke_warning_message?: string | null;
     notice_uuid: string | null;
 };
@@ -661,13 +661,36 @@ interface RedactoPrivacyCenterProps {
     baseUrl: string;
     ledgerBaseUrl?: string;
     slug: string;
-    accessToken: string;
-    refreshToken: string;
+    /** JWT access token. Optional so sandbox mode (see `token`) can omit it. */
+    accessToken?: string;
+    /** JWT refresh token. Optional; used by the OTP-refresh loop in the JWT flow. */
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: a pasted static token. When set, the Privacy Center runs
+     * against the sandbox with no JWT — it sends the single `X-Consent-Token`
+     * header, carries the acting identity (`email` || `mobile`) in each request's
+     * own payload, takes org/workspace from `organisationUuid`/`workspaceUuid`,
+     * and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox test subject email (carried in the request payload when set). */
+    email?: string;
+    /** Sandbox test subject mobile (fallback subject when `email` is absent). */
+    mobile?: string;
+    /**
+     * Sandbox UCIC: the client's own user id / org_user_id, e.g. a UUID or
+     * customer code; optional third identifier alongside email/mobile.
+     */
+    ucic?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org in sandbox mode). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace in sandbox mode). */
+    workspaceUuid?: string;
     onError: (error: Error) => boolean;
     initialPage?: InternalPage;
     onBack?: 'back' | 'signout';
 }
-declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
+declare function RedactoPrivacyCenter({ baseUrl, ledgerBaseUrl, slug, accessToken, refreshToken, token, email, mobile, ucic, organisationUuid, workspaceUuid, onError, initialPage, onBack, }: RedactoPrivacyCenterProps): react.JSX.Element;
 
 interface PrivacyCenterLayoutProps {
     children: ReactNode;
@@ -688,6 +711,29 @@ declare const PrivacyCenterCaseDetailsPage: () => react.JSX.Element | null;
 
 declare const NotificationsPage: () => react.JSX.Element;
 
+type AuthProviderProps = Readonly<{
+    children: ReactNode;
+    accessToken?: string;
+    refreshToken?: string;
+    /**
+     * Sandbox PoC: when set, the Privacy Center skips the JWT entirely — it seeds
+     * org/workspace/subject from the props below, sends the single
+     * `X-Consent-Token` header, carries the acting identity in each request's own
+     * payload, and never calls `/otp/refresh`.
+     */
+    token?: string;
+    /** Sandbox UCIC — the client's own user id (`org_user_id`); takes precedence over the subject. */
+    sandboxUcic?: string;
+    /** Sandbox subject (email or mobile) — carried in the request payload. */
+    sandboxSubject?: string;
+    /** Sandbox org UUID (replaces the JWT-decoded org). */
+    organisationUuid?: string;
+    /** Sandbox workspace UUID (replaces the JWT-decoded workspace). */
+    workspaceUuid?: string;
+    /** Organisation slug — used to seed sandbox sessionStorage. */
+    slug?: string;
+    onError: (error: Error) => boolean;
+}>;
 type AuthContextValue = Readonly<{
     accessToken: string;
     refreshToken: string;
@@ -878,13 +924,7 @@ declare const fetchCaseHistory: (organizationId: string, workspaceId: string, co
 
 declare const useCaseHistory: (organizationId: string | undefined, workspaceId: string | undefined, contact: string | undefined, authContext?: AuthContext) => _tanstack_react_query.UseQueryResult<NoInfer<CaseRequest[]>, Error>;
 
-interface AuthProviderProps {
-    children: ReactNode;
-    accessToken: string;
-    refreshToken: string;
-    onError: (error: Error) => boolean;
-}
-declare const AuthProvider: ({ children, accessToken: initialAccessToken, refreshToken: initialRefreshToken, onError, }: AuthProviderProps) => react.JSX.Element;
+declare const AuthProvider: (props: AuthProviderProps) => react.JSX.Element;
 declare const useAuth: () => AuthContextValue;
 
 /**